CAIN-42 CAIN StudioAGENTIC AI 75 · CAIN-A75-021
Agent Credential Review
Task-scoped, short-lived agent credentials
Last reviewed 2026-11-11
Products / Identity & Authority / CAIN-A75-021
DELIVERABLE Assessment Moat lineage: 2026 #21 · operator stream 2
An engine in this repository produces a bounded artifact from a supplied sample today.
What you buy
A defensible answer for this class of system: Bind the credential to identity, task, resource, parameter digest and a single use. The run is bounded and the limits are printed with the result.
A bounded engine run on the buyer's sample: findings, a written report, and a SHA-256 artifact manifest. The manifest is unsigned: it is not a signature and not an attestation.
Price and terms (proposal)
| List figure | $3,500–$7,500 per review |
|---|---|
| Indicative band | $2,500–$7,500 one-time (engagement) |
| Lead time | 5 business days after a signed SOW and sample intake |
| Buyer | IAM teams and agent-platform vendors |
The list figure comes from the individual offer; the band is the line default. Neither is an invoice. Scope is fixed in a one-page SOW before work starts.
Scope
One agent workflow or one tool surface; up to 10 tools; delegation and scope review.
Inputs we need
- Agent and tool inventory
- Current scopes and delegation edges
- One workflow to trace
What you receive
findings.jsonreport.mdmanifest.json
Explicit exclusions
- No vendor integration or partnership is included or implied.
- No legal, tax, clinical, insurance or safety certification advice.
- No third-party audit, SOC 2 report, ISO certification or patent filing.
- No production write access; work runs on samples the buyer supplies.
- No 24/7 response unless a separate retainer is signed.
Engine and evidence
This SKU is engine-backed: jit_credentials in cain/jit_capability.py. The operator runs it on your sample with python3 -m cain_agentic_products.cli deliver CAIN-A75-021 --out DIR.
The 2026 development and the CAIN-42 mapping · Check the mechanism · Fire a live governed decision · Public evidence
Next step
Request a scoped quote or a paid pilot: book a 20-minute scoping call. Bring one sample and the decision you need to defend. If the sample is not a fit, we will say so before you pay.
What this offer is not. No customer, partnership, endorsement, certification, patent or third-party audit is claimed. Prices are proposals, not validated rates. DELIVERABLE means a bounded engine run on a sample, not an assessment of a production system. Built by a three-person team.
← CAIN-A75-020 OS Containment ReviewCAIN-A75-022 Agent Wallet Mandate Review →